Researchers Find Critical Flaw in Kia's Web Portal Allowing Remote Control of Cars in 30 Seconds Using License Plate

Sep 26, 2024, 04:00 PM

Researchers have identified a critical flaw in Kia's web portal that allowed hackers to remotely track, unlock, and start millions of cars using only the vehicle's license plate or VIN. This vulnerability, which has reportedly been fixed by Kia, is part of a broader issue affecting a dozen carmakers over the past two years. The flaw enabled attackers to take control of a vehicle in as little as 30 seconds, accessing sensitive data and executing commands like honking the horn, posing significant cybersecurity risks.